Executive brief
Google Chrome's Skia graphics engine contains an out-of-bounds memory read vulnerability that can be triggered by processing a specially crafted media file. An attacker can exploit this to read sensitive data from within the browser's sandbox environment, potentially exposing user information or application state. The vulnerability affects Chrome versions before 152.0.7977.65 and has been patched in the stable release.
Technical details
This vulnerability is a classic out-of-bounds read (CWE-125) in Skia, the graphics rendering library used by Chrome. The root cause appears to be insufficient bounds checking when processing media files, allowing an attacker to read memory locations outside intended buffers. The attack vector is network-based: a remote attacker can craft a malicious media file that, when processed by Chrome, triggers the out-of-bounds read. No special user interaction beyond opening/viewing the media is required. While the vulnerability is contained within the sandbox and does not directly achieve code execution, it can leak sensitive memory contents. The fix is available in Chrome 152.0.7977.65 and later.
Affected products
- Google Chrome prior to 152.0.7977.65
Timeline
- 2026-08-25: disclosed
- 2026-08-25: patched: Chrome 152.0.7977.65 released